$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfc46e75-2524-374a-bccb-2391f95825df.roa File: dfc46e75-2524-374a-bccb-2391f95825df.roa (raw, json) Hash identifier: 3W9TMSm7yyv1QyOvtoxbbry1ibyuR4Mcf5sDo7i8RRE= Subject key identifier: F0:53:C1:3B:7B:14:9E:44:1E:D2:AC:BD:2C:51:CC:A9:7A:A9:1F:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0C84BF5B01DF513241380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfc46e75-2524-374a-bccb-2391f95825df.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 40.142.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c8:4b:f5:b0:1d:f5:13:24:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=03d07d7e-d525-4232-bc2e-2e1d8f40a8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3e:d1:96:b5:f6:cc:cf:95:bf:de:6e:e7:56: 6e:8b:8c:b0:5b:62:f7:9f:0a:24:a8:9c:76:5f:bf: 10:9d:d9:0f:98:a9:d3:ad:ff:bf:d2:a1:df:e0:4a: f7:b3:53:38:5c:cf:05:21:aa:55:ce:b5:70:cc:c5: 27:85:f5:78:8f:7d:c3:f0:93:2f:6f:b0:73:f1:e4: 06:77:07:0c:e5:91:f6:c9:57:97:f7:bb:65:43:f5: e2:d5:fb:19:13:49:b6:0c:e6:87:ee:06:e7:90:84: 21:a0:a3:9f:96:61:44:4a:f7:f3:c3:b7:61:2f:1d: 73:07:ec:ed:f6:4c:c7:5b:b3:90:26:50:4f:51:5c: 3c:db:fe:1d:e8:a3:16:9e:d1:fe:d9:c1:1e:3b:20: 2b:35:6c:0d:4e:80:15:94:bd:13:34:32:3f:b2:74: e6:55:d6:26:08:18:d5:17:24:85:b2:69:4b:9a:74: b6:ef:25:b2:ee:83:8b:24:06:64:da:7d:1f:53:be: c9:f5:d1:b0:6d:47:5f:22:55:ae:3a:5a:b4:b7:14: d4:d5:83:9b:43:86:5a:2c:4a:0d:69:ee:82:25:03: fd:fc:64:81:71:7f:e4:c0:42:4b:1c:49:77:2e:b5: e2:be:b1:73:7c:c5:1b:e6:23:fd:52:3d:8c:f9:7c: 39:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:53:C1:3B:7B:14:9E:44:1E:D2:AC:BD:2C:51:CC:A9:7A:A9:1F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfc46e75-2524-374a-bccb-2391f95825df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:1f:85:d1:d3:57:a3:a5:d1:d7:28:21:e4:e4:1a:b5:4c:5e: 54:7a:c4:92:a1:af:c8:a0:e5:2f:1f:1a:2f:f8:3f:b8:a2:f5: 83:6e:ff:11:8f:65:db:ed:98:82:1f:8c:fd:e6:20:ed:1b:50: 28:fb:27:bb:81:13:38:71:78:d6:c5:e4:92:7f:0b:bb:60:b5: 3b:ea:65:4d:e5:0e:a2:78:f7:5f:7b:67:d5:31:c0:b6:b6:58: 0e:cf:bc:d7:48:5c:08:7a:6e:75:ac:db:69:ab:d9:86:06:63: 9d:f7:4b:65:d6:72:8c:39:85:37:ba:ab:f4:c5:55:53:c5:a1: 9c:6c:06:6c:b2:8f:ad:df:09:8a:60:77:62:59:68:b3:5f:85: 76:4c:25:59:40:6c:6e:eb:87:4f:1c:a3:8a:02:f7:ce:db:d6: f9:3c:4a:4e:77:38:bb:c4:50:9d:66:f1:c7:a5:21:92:0c:8d: 83:a4:dc:85:26:12:81:e2:b8:8b:f9:3f:28:6e:b3:02:a0:1a: 1e:14:3e:c5:3a:31:52:b7:a9:c5:43:09:ac:6b:19:2b:99:11: f0:9c:96:da:a4:18:93:71:19:ea:86:28:f0:91:6d:89:4c:54: c1:fd:46:1e:0e:cc:f8:19:1b:4e:90:10:fd:13:d9:ab:e1:d6: f7:fb:db:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMhL9bAd9RMkE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MDNkMDdkN2UtZDUyNS00MjMyLWJjMmUtMmUxZDhmNDBhOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T7RlrX2zM+Vv95u51Zui4ywW2L3nwokqJx2 X78QndkPmKnTrf+/0qHf4Er3s1M4XM8FIapVzrVwzMUnhfV4j33D8JMvb7Bz8eQG dwcM5ZH2yVeX97tlQ/Xi1fsZE0m2DOaH7gbnkIQhoKOflmFESvfzw7dhLx1zB+zt 9kzHW7OQJlBPUVw82/4d6KMWntH+2cEeOyArNWwNToAVlL0TNDI/snTmVdYmCBjV FySFsmlLmnS27yWy7oOLJAZk2n0fU77J9dGwbUdfIlWuOlq0txTU1YObQ4ZaLEoN ae6CJQP9/GSBcX/kwEJLHEl3LrXivrFzfMUb5iP9Uj2M+Xw57QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBTwTt7FJ5EHtKsvSxRzKl6qR9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZjNDZlNzUtMjUyNC0z NzRhLWJjY2ItMjM5MWY5NTgyNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKI4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgfhdHTV6Ol0dcoIeTkGrVMXlR6xJKhr8ig5S8fGi/4P7ii9YNu/xGP ZdvtmIIfjP3mIO0bUCj7J7uBEzhxeNbF5JJ/C7tgtTvqZU3lDqJ49197Z9UxwLa2 WA7PvNdIXAh6bnWs22mr2YYGY533S2XWcow5hTe6q/TFVVPFoZxsBmyyj63fCYpg d2JZaLNfhXZMJVlAbG7rh08co4oC987b1vk8Sk53OLvEUJ1m8celIZIMjYOk3IUm EoHiuIv5PyhuswKgGh4UPsU6MVK3qcVDCaxrGSuZEfCcltqkGJNxGeqGKPCRbYlM VMH9Rh4OzPgZG06QEP0T2avh1vf7250= -----END CERTIFICATE-----Generated at Wed Aug 6 16:24:13 2025 by rpki-client